Fixed permissions for the new api