use correct set of permissions when updating

the change request had an empty set, was erasing all non-streams permissions when updating

issue #175