add permission doc