fixed guest permissions