adding permissions