origin stuff
fixed permission (serious bug) and added validation exception