Fix add permission at api/authorization.py