add guard, build out more of the permissions setup