changed the URL of the some API calls about the permissions