update permission mapping