relations between permissions and actions