add permissions to *_partner* for all