rationalize visitor permissions