add permissions to bpm.contrib.hub
add permissions to bpm.contrib.hub