cleanup permission migration