check permissions on serve_media