add permission

LGTM