add attributes permission