remove hasPermission from saveOrUpdate