add content permissions