changed user permissions on user show