fixed permission setup