submodule read write permissions