proxy permissions