sneak in some permission stuff