fix permission for users