adjusted permission rights (for guest)