handle user change permission setting