[hooks/security] provide attribute "add" permission [applied]