a few more musing on permissions