fix perms on itmsworker