ah i just discovered permissions queries