fixed workspace permissions