allow objects to have permissions