fixed permissions on audits