permission-related class for user table