add permission to read external data