weaker permissions