adding get_permission to return one permission record