move permission addon to concern