fixed user permitted parameters