more tighten permission