make sure to unserialize the permission data
@todo this may need to be updated to ve smarter to detect which type of data it actually is and act accordingly
@todo this may need to be updated to ve smarter to detect which type of data it actually is and act accordingly