fix reward sort permissions