complemented manifest permissions