security patch on user dashboard action