drop not null constraint from interaction_time
more secure permissions