user permissions fixes