2407: more permission updates