another bugfix for the db class and new permissions for the user class