add permission settings

Change-Id: Ic00adf0b9d47093a5d572c29c3eedc36fe4a00e4