moved permissions before <application> tag

testing forking and pull request process for aflogical ose repo

moved permissions before <application> tag
maybe it's better to leave this tags private and stick to the convention?