permission specs improved