add permit user_role