cdrao & permissions