added a reverse registry of user to objects allowed