fixed permission_assign_user_legal