fix permissioning bug