clarified permission revocation