permissions foreign key
Update ss