reduced the permissions required