ring permissions