trying to reduce permissions