bump permissions