start work on database user/perms