add permission for view