added permissions to assets & galleries. NO TESTS