rest permissions settings updated