permissions for Wato