new websocket command to set permissions