diff --git a/.github/workflows/pr-18-autolabel.yaml b/.github/workflows/pr-18-autolabel.yaml
index c5a2d32b5db98..47a0edc4cbf25 100644
--- a/.github/workflows/pr-18-autolabel.yaml
+++ b/.github/workflows/pr-18-autolabel.yaml
@@ -8,9 +8,10 @@ on:
     branches:
       - "18.0"
 
-permissions:
-  issues: write
-  pull-requests: write
+#permissions:
+#  issues: write
+#  pull-requests: write
+permissions: {} # no restriction on permissions
 
 jobs:
   changed-lines-count-labeler:
diff --git a/.github/workflows/stale-issues-safe.yml b/.github/workflows/stale-issues-safe.yml
index af04675d48d47..97d2992e2dd40 100644
--- a/.github/workflows/stale-issues-safe.yml
+++ b/.github/workflows/stale-issues-safe.yml
@@ -8,7 +8,7 @@ on:
     types: [created]
   workflow_dispatch:
   
-permissions: {} # none
+permissions: {} # no restriction on permissions
 
 jobs:
   stale:
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 1ce087caeead5..15c7e194b895c 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -6,6 +6,8 @@ on:
     branches:
       - "18.0"
 
+permissions: {} # no restriction on permissions
+
 env:
   ENVGHT: ${{ secrets.GITHUB_TOKEN }}
   ENVGHU: ${{ github.token }}