DDF-462 fixed authz filter to set the correct permission