added permissions table - thinking about workgroups