update feature permissions