working on permission manage