add changes to permission.js