permissions tweaks