mapping out permissions api