add permissions for app