update permissions for quotes