UNTESTED; moved permission description list to backend