timeline permissions