Fix top-level asterisk permission