fixing checkbox permissions