fixes for tomcat permissions: