add grape gem
api for permissions