update permission control