change permission checking