fix permission security facade