add permission to solutions_controller