add security permissions

add security permissions