serializer/permissions template