are the tags in your example supposed to grant permission somehow?