finish extend user and add permission