tiny refactor
add first permissions stuff