remove query permission
