download has of course no permissions