add action permission