if you didn't want to have to update the schema each time with a new permission, you could do it dynamically, but that's less efficient, so only do so if you need the dynanism