route: train permission added