db perms etc