fixed permission back for logged-in [typo fix]