new module for listing permissions