handle subscribe/publish/both permissioning