fixed permissions callback

In my defence, I was drinking