perms for widgets