pre-permissions specs