permission lab