update client permissions