cleanup of permissions