permission structures