Set permissions on container