add permitted params