use URI as key in permissions dict