diff --git a/plugins/ktcore/KTFolderActions.php b/plugins/ktcore/KTFolderActions.php
index 28ea797..e6eee26 100644
--- a/plugins/ktcore/KTFolderActions.php
+++ b/plugins/ktcore/KTFolderActions.php
@@ -59,7 +59,7 @@ class KTFolderAddFolderAction extends KTFolderAction {
 class KTFolderPermissionsAction extends KTFolderAction {
     var $sName = 'ktcore.actions.folder.permissions';
 
-    var $_sShowPermission = "ktcore.permissions.write";
+    var $_sShowPermission = "ktcore.permissions.security";
     var $_bAdminAlwaysAvailable = true;
     var $bAutomaticTransaction = true;
 
diff --git a/plugins/ktcore/KTPermissions.php b/plugins/ktcore/KTPermissions.php
index ea67391..51f9ae4 100644
--- a/plugins/ktcore/KTPermissions.php
+++ b/plugins/ktcore/KTPermissions.php
@@ -82,8 +82,9 @@ class KTDocumentPermissionsAction extends KTDocumentAction {
 class KTRoleAllocationPlugin extends KTFolderAction {
     var $sName = 'ktcore.actions.folder.roles';
 
-    var $_sShowPermission = "ktcore.permissions.write";
+    var $_sShowPermission = "ktcore.permissions.security";
     var $bAutomaticTransaction = true;
+    var $_bAdminAlwaysAvailable = true;
 
     function getDisplayName() {
         return _('Allocate Roles');