data list permissions