add more permissions in config.xml