user-eefined permissions