added method to refreshPermissionsFromServer()