Add set permissions to api