Lab3: permission assignment is implemented