adding permissions lab