use strings for permissions