removed user permission check