change collection_permissions_attributes method; closes #677