run permission handler