change permission for work.add_image to UserPermission