Update permission.js