add permissions to the manifest