Update config.xml for permissions