use JSON to update permissions
drop obsolete template