configure permissions