fix create-hole permission