we should file an issue about restricting by permissions here