added check for permission-change permission; redesigned user icon position in permission table