update permission controller