fix permission filtering for page add action