Fix user permission for apply link