kdm permission problem