Add permissions to index and show