switch to ModifyPortalContent as main permission