removed permission for /promote