reduce permissions requirement