fixed service filter (by permissions)