add readAll permission