more permission fixes