Move permissions to permission.yml