add missing return to permissions