enforce write possibility for non-root users