update permission
update menu visibility with permission