tweaking permissions... again