first attempt on permissions check