Fix permission urls