added read_stream permission