correct description of permissions