fix permission ap (aon)