just setting permissions