fixed validate permission
testing validation. seems ok. need to check own_key and public key