fix default permissions