added user and permission to database