add permission step to README