fix portlet permission