add data permissions