permissions improvements