add ws permission