now we can define more permissions