add query to list permissions