add cms permission