fix scope for permission