permission bug fixed for new user