some permission adjustments