Update permissions.yml