update menu permissions