revamped entity permission schema