sets permissions on run