add url for permissions script