set asset permissions