add permission on menuitem