update permission levels servlets