update permissions xml's