add more permissions