permissions management added 2 - need a bit more work