change permissions to support multiple permissions, all must apply for the command to run