add permissions and privilege