fixed a permissioning bug