Permission API

Changes to POST /add-permission

post/add-permission