Add challenge permission