avoid permission error in account api