fix(filter auth): correct the permission choices