set proper permissions