set up file permissions