beginning of permissions