checking for permissions on update