fixed permissioning bug