added access permission to config.xml