setting up plugins permissions in backend