fixed manifest permissions