add security by user id