fix spec about permission