permission and dashboard