Permission API

Changes to POST /api/update-permission

post/api/update-permission