feature permission fixes (still broken)