change permission on manifest.webapp