fix permission check in list command