webpage permissions weirdness