fix the object permissions, too