add filesystem permission