improve administrability of permissions+status