permission-based placement

2