keyword permissions