add permission for logged users
prefinal push