private work permissions update2