Permission API

Changes to POST /api/add-permission

post/api/add-permission