prevent unexpected permission changing