fix rental request permissions