product app permissions needed