add permission attribute to manifest