simplify permissions