fix permissions: userapps