add field permissions