Fix parameter name (security)
Allow updates to existing permission rows