fix permissions check: positions, rooms