added permissions to config.xml