update (allow setting read only grant permissions)