fix up user perms stuff