fixed grant permission to user