adding permissions
update permissions