CHG: perms are part of setup