updated the users permissions