UKSM: set user permission (thanks fishears)