Move manage all users' stuff to do to permission instead of user setting