update scope permission