updates permissions