update permissions in README