revise security permission