trim permissions