testing for permissions