docs: correct type of permissions