simplified permissions