better permissions checks on drag