add permission for like api