fixed permissions, re-enabled validation