update permissions for apis that were missed