change permissions according to webpart