make permission identifier unique