How to create and updates user permissions