first pass at adding permissions