adjust permissions (again)