fixed #2, fixed #3
new permission schema