set permission on global variables to private