add perssion to the vaa that nocreate user can not change the board states