rearrange user permissions