update state permissions docs