tweaking permissions