filter and permissions on charts endpoint