should use 'readwrite' when giving all permissions