add hcat and disable dfs permissions