add ability to set permissions