Permission API

Changes to POST /update-permission

post/update-permission