permissions: scripting