tightened permission requirements