fix permissions for watermarks