permissions report