allow read/write permissions