fixed permission levels (I hope)