add permissions manager