add extra user-permission