permissions for customer and venue owner