MOD: complete interface permisson restriction