added xml permissions