update base permissions