add a permission and change js