fix: OMG, permissions checking din't work