fixes to principles and contacts permissions