in the middle of figuring out assigning permissions spec