fixed users permissions