edit permitted user update attributes