add better permissions