more clean up of permissions