enhanced auth permissions