implemented ahmia boolean tracking one shot
solved two tricking things (permission not by auth, powers in list)