Synchronize schema: permissions evolution
Fix some (but undoubtedly not all) sql for permissions