All players who join a server has the permissions which are "default: false" or "default: op" in plugin.yml
default: op https://github.com/PocketMine/PocketMine-MP/blob/master/src/pocketmine/permission/Permission.php#L38