extract command permissions