added indipendent permission for ajax