a good start to adding more permissions/restrictions