add permissions in BoxItem