update validation for permissions