update permissions