split set write permissions into own namespace