added more permissions and editing routing