setting permissions similarly to whaleshark.org