password and permission