permission check functions, updated config