UserWidget is user own data, is need to add permissions？