updating account permissions