permission tweaks