enforce file permissions ... not finished