- add permissions to manifest