permissions working without FQL