fix user perms