real initial commit, getting some permissions functionality working