permission changes, etc