specs for permissions