are the default permissions sufficient?