add permissions and deps