added support for permissions endpoints