Fix permission for user role