fixed bug and user_id allow