Permissions fixes in the offers module