updates user table on permission save