new permission system (mongodb) and new call system