user_id added to permitted list