add permission at /deploy