use the response instead of the state of html in permissions widget