fixed bug in permissions design