more work on new permissions structure - in progress