flexibility for permission setting