add user_id and goal permissions