fix button permissions