add permissions panel + unittest