updated permissions stuff