moving the permissions to the permissions class.. because that just makes sense