update features to include permissions