private message & permissions settings