allow empty permission fields

fixes #172