Update plugin.yml

added permissions