extension permissions