Permissions: fixes promotions api?