Fix bookmark/flag permissions