finalizing changes for permissions - next try