permission clarification