better check on perms