latest permissions (still working through bugs)