updates permissions list