fix: bucket permission should not be set to private #1