added a note about permissions