add basic permission stuff