UPDATE add permissions for bookmarks