added notes about permissions