permissions fine tuning