permission/doc update