permitting risk