including permissions for user module