more thoughts about permissions