Function set_permissions 

pub async fn set_permissions(
    state: &AppState,
    ref_id: Uuid,
    new: NewPermissions,
) -> Result<(), AppError>

Replaces the set of permissions for a ref.

Note that this function does not update/diff the permissions, it replaces them entirely. An exception is ownership which can never be revoked once granted.