add permissions docs