fix permission vendor