try to make permissions a bit more consistent