fixed permissions granularity