set ion permissions