update permissions - again