set permissions on run