set up statements collection with permissions