array of permissions