set permission for client