worked on permissions and security