completed first pass of adding permissions to relationships