fix grant permission