fix permission for production