adding status_update permission