add method to insert permission