change permissions first approach