permission handling with essentialactions