xml: added required permissions