added scope/on-the-fly permissions requests *back* into index