config xml permission