added hosted/priveleged appp permissions options