download permissions xml user story