fix: permissions