fixed npc permission