description of the permission_required decorator