adding field permissions