param perms for people who can view queries