added permissions management