updating perms on grader.js