permission improvements