support many permissions for user