new yaml vendor, new permission class, new tests
merged latest changes