add permission mapping