add permissions to recipes