simplify permitted_to