set storage permissions