setup sets user permission