permission-based email