next try: set permissions