set the right permissions