added a method to add granular control to user permissions