add permission type on attribution, new api to get installed list with minimum info