add tour permissions