rolledback permissions declaration in manifest