added permission.js to config