Switch permissions from embeddedebale to OneToMany
Fix permission update