add the permission control