minor permission fix for suppliers