Update permission of users