PUT response as id and fix permissions bug