fixes for user perms