hard code all permission