update user permissions
user profile