updated permissions section closes #4