refactored bo permissions