another permissions tweak