slimming down permissions