snippets - part 4 - auth & permissions