permission system is nearly finished now