catalog rendering & permissions