tool permissions