implemented "strong_permit" app callable