fix bug in permissions