get permission approach