implemented permissions and can get the current users uid