added client permissions