new permissions for filtered html