write about list permission API