This lab demonstrates how an innocent-looking "Claim" action triggers a hidden Permit/Approval request.