add actions permissions