showing permissions_url for testing prod