#1 add permissions logic