fix cnadc permissions check