update permitted actions