added permission specifications