add has permission