perms check