update permission of request