fix permission validation issue