update plugin.yml and permissions