channel tags: fix permissions code (for HTSP and HTTP API), fixes #2501