fix permission override bug