set permissions on yii