Update database schema: set ref_no not null, profile ACL permissions