fixed permission for dclookup