add permission security feature