#11 working through permissions