bug 4896: granular permissions now always on (DB rev 138)