added basic client permissions