use new, simplified permissions (and set dynamically)
use new, simplified permissions (and set dynamically)