add permission set for objects