no unnecessary permissions