update_record_permissions() isn't callable via API as it has no session_id in its params See merge request !780