permissions change for zero down time