permission change on token pattern