finish lab-permissions