cleaning normalizing permissions