forms for changing user permissions are now fixed