add permission for question_id