only superusers can set permission to users