global permissions for the API