update user permission on search