finalizing permissions