permission lookup

check is going to be implemented