add list permissions