setting permissions from cli