update permissions etc