setPermissions now takes an argument to add more users to those who can access the resource