permissions = friend + family (4)