add two needed permissions in manifest

Signed-off-by: Liew Zhao Wei <zhaoweiliew@gmail.com>