Fix permission scopes. This is a widening of permission scopes and hence a backwards compatible change to the API