set permission on deploy