upate permissions.rb