fixed param permissions