bug fix. null access on in-sufficient permission