tweaks to permissions