add permition on config.xml