permission check on settings