permission clean up