bootstraper now queries permissions correctly