add node permissions