add support for "all" permission