set permissions for deploy