add permissions to bpm.contrib.hub