wasi:filesystem - semantics of file descriptor without permissions

What happens when a guest calls open-at without read, write, and mutate-directory descriptor-flags?

I'm guessing that this would just allow them to view the directory structure - since there's no explicit permission for that - but won't let them do anything else. Is that correct?

(does it make sense to block such a case since that descriptor can't really do anything useful?)