fixed incorrect config overwrite in PermissionFactory constructor