lesson on masks and permissions