add read permissions