setPermissionsOnSession