user permission change implemented using array