added permissions.xml from EE7 spec