modify permission settings