set permission explicitly