Update user permission