Fix sandbox rights