Migrate permissions to app2