database: setup permissions