assign publisher permissions via web interface