and im struggling a lot to get a grasp on permission queries, so I'm having to re-deploy frequently