add permissions to manifest