widgets and permissions