fix permission regression