bugfix: uppercase all supplied permissions, because provider provides them  	capitalized and "insert" isn't equal to "INSERT"