doamin permissions