removed systemXHR permission