use new dynamic permissions