Allow setting the same permission for multiple users. close #659