permission and form readonly state