clean up permissions