created add_rbac_permission and updated permit decorator to use add_rbac_permission