add permission object into box items