added permissions feature