fix #447: setStatus does not check the correct user for permission, add missing default value in config files