example of permission in main.html