fixed ace, and some permissions