layed out a permission page