fix for security permissions