add ability to map permissions per connection