stage 1 of issue #3, need to add permissions management