[add] perms and access callback