add permission statement