setting permissions on question update and remove