cleanup asset permissions some