assign perm in server side