show the permissions handled by the workflow instead of hard-coded ones